https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T14:23:23.808082+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111609 fkie_cve-2026-111609 2026-10-20T14:23:23.833895+00:00

PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequential ids through editSubscription to view subscriber details and use updateSubscription to reassign subscriptions to their own journal, revoking victims' access.

 https://db.gcve.eu/vuln/ghsa-rwgq-cgw6-3p37 GHSA-rwgq-cgw6-3p37 2026-10-20T14:23:23.834010+00:00

PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequential ids through editSubscription to view subscriber details and use updateSubscription to reassign subscriptions to their own journal, revoking victims' access.